Automated ICS template for STRIDE Microsoft Threat Modeling Tool

Mike Da Silva (1, 2) , Maxime Puys (1, 2) , Pierre-Henri Thevenon (1, 2) , Stéphane Mocanu (3, 4, 5) , Nelson Nkawa (3, 4, 5)

1 CEA-LETI - Commissariat à l'énergie atomique et aux énergies alternatives - Laboratoire d'Electronique et de Technologie de l'Information
2 UGA - Université Grenoble Alpes
3 LIG - Laboratoire d'Informatique de Grenoble
4 Grenoble INP - Institut polytechnique de Grenoble - Grenoble Institute of Technology
5 CTRL-A - Control for Autonomic computing systems

Industrial Control Systems (ICS) are specific systems that combine information technology (IT) and operational technology (OT). Due to their interconnection and remote accessibility, they become a target for cyberattacks. As a result of their complexity and heterogeneity in terms of devices and communication protocols, specific security controls and risk analysis methods need to be developed. In particular, in order to reduce the effort of deployment of risk analysis on such complex systems, automated methods need to be provided. This paper deals with automation of the risk identification process for ICS using the STRIDE threat modeling framework. We extend the well-known STRIDE modeling tool, namely Microsoft Threat Modeling Tool (MTMT), with an incremental template dedicated to ICS and provide additional tools to automate the analysis using specific vulnerability extraction from Internet CVE databases

Keywords: MTMT; Security; Cybersecurity; Risk assessment; Risk analysis; SCADA; ICS; IT; OT

Domains: Cryptography and Security [cs.CR]

Mike Da Silva, Maxime Puys, Pierre-Henri Thevenon, Stéphane Mocanu, Nelson Nkawa. Automated ICS template for STRIDE Microsoft Threat Modeling Tool. ARES 2023 - 18th International Conference on Availability, Reliability and Security, Aug 2023, Benevento, Italy. pp.1-7, ⟨10.1145/3600160.3605068⟩. ⟨hal-04165419⟩